Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C46966CC93511F1AD0A3AD3CE1D38B0.roa
File:                     9C46966CC93511F1AD0A3AD3CE1D38B0.roa (raw, json)
Hash identifier:          g1KaX/VfxPDSdnZaQF8xEi+OiuIhjiSaaVQ9SmMzKYk=
Subject key identifier:   D4:A2:E5:35:23:6E:46:52:06:74:48:A4:E6:73:31:27:43:86:CB:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C46966CC93511F1AD0A3AD3CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 07:45:52 +0000
ROA not before:           Fri 16 Oct 2026 07:45:47 +0000
ROA not after:            Fri 20 Nov 2026 07:45:47 +0000
asID:                     400619
IP address blocks:        156.254.16.0/24 maxlen: 24
                          156.254.17.0/24 maxlen: 24
                          156.254.18.0/24 maxlen: 24
                          156.254.19.0/24 maxlen: 24
                          156.254.20.0/24 maxlen: 24
                          156.254.21.0/24 maxlen: 24
                          156.254.22.0/24 maxlen: 24
                          156.254.23.0/24 maxlen: 24
                          156.254.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122326 (0x1ddd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 07:45:47 2026 GMT
            Not After : Nov 20 07:45:47 2026 GMT
        Subject: CN=6ad1d630-23b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:e4:af:ce:d5:6c:d5:55:a4:8b:cc:87:74:
                    62:95:84:cf:99:98:e9:51:ee:fe:df:32:50:32:b3:
                    98:5b:5c:62:e1:9f:90:18:0d:ed:cf:6c:45:51:30:
                    9f:d5:b9:35:11:d0:dc:26:eb:a6:1c:fd:e1:5c:4b:
                    66:99:fc:1d:36:5f:6b:bb:91:78:7c:5e:13:19:14:
                    7a:ab:94:5f:4e:77:6b:b7:80:5a:29:a3:c4:76:58:
                    f3:72:a2:5a:f7:74:05:bc:19:d6:ad:ce:fa:73:c2:
                    d2:6f:90:b9:a0:10:75:df:36:25:c1:7e:bf:9d:1b:
                    ed:37:c1:d0:c0:3f:d5:91:d7:f1:fb:78:23:ae:05:
                    d4:87:47:bd:4a:2c:eb:83:06:f6:e6:3e:5d:3f:e6:
                    57:e9:04:46:55:ff:88:47:c8:46:30:55:2f:71:88:
                    0e:a1:bf:6d:35:5d:b8:35:27:4d:e4:3b:db:86:c5:
                    44:4b:1d:ec:17:31:1a:f2:59:41:ee:b8:38:35:83:
                    a4:61:95:13:d7:5b:88:b8:10:6a:78:4d:a6:92:4d:
                    8b:bf:ae:ca:b0:35:06:43:b1:e2:72:41:18:04:6b:
                    7e:ea:31:c0:d2:c5:01:ff:77:84:ff:e2:6b:0a:41:
                    37:98:4f:dd:63:87:22:c2:8d:02:8d:2e:6d:a2:e6:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A2:E5:35:23:6E:46:52:06:74:48:A4:E6:73:31:27:43:86:CB:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C46966CC93511F1AD0A3AD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:dc:4b:2f:ec:8d:7d:53:bd:9f:ff:92:1f:bd:41:80:f9:22:
         d9:db:c2:45:67:cc:ae:30:f0:a6:23:4d:29:d4:f1:6d:c7:d8:
         e6:26:e8:de:d4:9d:aa:55:62:88:1c:1f:a4:79:05:2b:23:3b:
         e8:b9:96:69:d9:c5:f6:98:85:c2:6b:00:98:88:6e:37:ca:fa:
         d6:bf:bd:bb:4e:17:69:0b:67:9f:29:ca:d9:ac:62:6b:b9:0c:
         0e:71:c8:1a:1e:e3:20:ea:bb:8e:31:7f:20:e8:cb:3f:f0:5f:
         ad:e1:ae:1e:67:6c:aa:86:af:dd:84:b8:70:36:da:dd:04:dd:
         6a:20:15:a1:a5:fd:90:70:76:83:33:51:c1:6a:34:5f:d7:5f:
         16:de:4c:30:95:8d:44:75:2c:9d:85:d0:cc:a6:5a:bd:de:20:
         f2:9f:6d:fd:7a:6d:7f:c7:a6:c6:5d:53:eb:37:e7:04:1e:79:
         1c:5e:1f:80:58:e4:ae:81:5d:43:0b:8c:45:00:66:49:10:21:
         b7:fa:00:7e:a7:21:75:5f:68:bd:06:71:be:ef:41:04:3a:05:
         9c:07:61:22:1c:97:01:e7:aa:02:e8:a4:8c:d7:40:c9:32:69:
         bb:0d:48:e3:f7:32:3f:ea:02:e0:e0:81:a9:57:dd:21:f0:5e:
         67:55:7a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----